CVE-2026-85429 — MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAG…
Published: 2026-09-03 · CVSS: 8.7 · CVSS 4.0
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODE_MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without validation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7